Android Spyware Asin Targets Arabic Users via Fake News, PDF and War Map Apps
Summary: ESET reported a new Android spyware codenamed Asin, first detected in early 2025, spread through websites mimicking utilities, war-related updates, and a government news source, including govlens[.]net and live-war-map[.]com promoted via Facebook and Telegram accounts. Samples include an APK from c-pdf[.]net downloaded in December 2025 on a Xiaomi Redmi Note 13 Pro running Android 15 and one posing as "Syria Defense Map" from syriadefensemap[.]com detected around mid-January 2026 on a Redmi Note 13 Pro+ 5G, with installation requiring manual sideloading and permission grants.
Key Takeaway: Three of the five fraudulent apps ESET unearthed - GovLens, WarMap, and Syria Defense Map - appear aimed at people doing open-source investigation, suggesting Arabic-speaking journalists and OSINT practitioners were the intended targets, and the activity remains unattributed with objectives unknown.
Read the original at The Hacker News ↗
- Topics
- Malware
- Related
- ARTEX and beyond: AI-enabled penetration testing platforms Cyber Risks · Nov 13, 2026Fake GTA 6 download goes after Steam logins and crypto wallet data Cyber Risks · Nov 13, 2026Operation Endgame Takes Down Gootloader, CastleRAT and StealC Servers, Seizes 6.4M Stolen Logins Cyber Risks · Nov 13, 2026